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AMENDMENTS TO THE CLATMS 

This Listing of Claims will replace all prior versions and listings of Claims in the 
subject Patent Application: 

Listing of Claims : 

Claim 1 (Currently amended) A method of key-management in Distributed 
Sensor Networks, comprising the steps of: 

prior to deployment of a plurality of sensor nodes of the Distributed Sensor 
Network, storing , in e ach s e nsor nod e of th e Distribut e d S e nsor N e twork, a respective 
key ring including a plurality of individually selectable private keys in each sensor node 
of the Distributed Sensor Network , said private keys being randomly chosen from a 
common pool, said key rings of at least a pair of said sensor nodes having a pre-defined 
probability of having at least one common private key in common ; 

deploying said plurality of the sensor nodes of the Distributed Sensor Network; 

actuating upon deployment of said plurality of the sensor nodes of the Distributed 
S e nsor N e twork, at least one sensor node b e ing actuat e d to discover at least another 
sensor node sharing said at least one common private key to establish a secure 
communication link between said one sensor node and another of said sensor nodes; and 

using said at least one common shared private key for subsequent secure 
communication between said at least one sensor node and anoth e r said other sensor nod e s 
node over said secure communication link established therebetween . 
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Claim 2 (Currently amended) The method of claim 1, further comprising the 
wherein the step of storing a respective key ring includes the steps of: 
generating a key space having a multiplicity of keys , 
randomly selecting a pool of keys from said key space, 

assigning a specific key identifier for each key fern in said pool of keys, and for 
each said sensor node of the distributed sensor network, 

randomly selecting a distinct s e t number of the keys from said pool of keys to 
form said respective key ring for each sensor node, said number of keys being 
probabilistically determined to provide said pre-defined probability of said pair of sensor 
nodes having at least one shared private key, and 

storing said specific key identifiers with said respective key ring in each said 
sensor node . 

Claim 3 (Currently amended) The method of claim 2, furth e r comprising th e st e ps 
wherein the step of deploying is preceded by the step of: assigning to each said sensor 
node a specific sensor identifier. 

Claim 4 (Currently amended) The method of claim [[2]] 3, further comprising the 
steps where the step of actuating includes the step of: loading to said at l e ast on e s e nsor 
node a specific key identifier of each key on said key ring of said at least one sensor 
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nod e , and broadcasting said key identifiers with said specific sensor identifier associated 
with said at least one sensor node to discover said at least another sensor node and 
establish a link therewith . 

Claim 5 (Currently amended) The method of claim 3, wherein said Distributed 
S e nsor N e twork furth e r includ e s a plurality of controll e r nod e s associat e d with said 
sensor nodes in a predetermined order, further comprising the step of deploying is 
preceded by the steps of: 

providing a controller node to securely communicate with a plurality of said 
sensor nodes for collecting data therefrom; 

storing saving said key identifiers of the keys in said respective key ring of each 
said sensor node along with said sensor identifier of said each sensor node on a trust e d 
said controller node from said plurality of controll e r nod e s . 

Claim 6 (Original) The method of claim 4, wherein said key identifiers are 
broadcast in a clear text. 

Claim 7 (Original) The method of claim 4, wherein said key identifiers are 
broadcast in a hidden pattern. 
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Claim 8 (Currently amended) The method of claim 5, further comprising the steps 
of: computing a plurality of sensor-controller key s respectively shared by said each 
plurality of sensor nodes with said trust e d controller node , and loading said trust e d 
controller node and each of said each sensor nodes with an associated one of said sensor- 
controller keys. 

Claim 9 (Currently amended) The method of claim 5, further comprising the steps 
of: upon compromising of at least one sensor node, revoking said at least one 
compromised sensor node by broadcasting from said trusted controller node a revocation 
message containing a signed list of the key identifiers of the key ring of said 
compromised sensor node to be revoked. 

Claim 10 (Original) The method of claim 9, further comprising the steps of: 
generating a signature key for said list and unicasting the same to each said sensor node. 

Claim 1 1 (Original) The method of claim 10, further comprising the steps of: 
upon obtaining of said signature key by an uncompromised sensor node, verifying said 
signature key of said signed list of the key identifiers of the key ring of said compromised 
sensor node, locating said key identifiers in said key ring of said uncompromised sensor 
node, and removing keys corresponding to the key identifiers of the compromised keys 
from said key ring of said uncompromised sensor node. 
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Claim 12 (Original) The method of claim 9, further comprising the steps of: 
reconfiguring the communication links of the sensor nodes affected by revocation of said 
compromised sensor node. 

Claim 13 (Currently amended ) The method of claim 1, further comprising the 
steps of: upon expiration of at least one key shared by said at least one and another the 
other sensor node, removal of said expired at least one key from said key rings of said at 
least one and another the other sensor nodes, and searching for another key common for 
said at least one and anoth e r the other sensor nodes to establish a new communication 
link therebetween. 

Claim 14 (Original) The method of claim 2, further comprising the steps of: 
generating a connectivity random graph for said Distributed Sensor Network, and 
computing the number of the sensor nodes, the number of keys in said pool of keys and 
the size of each said key ring, sufficient to provide for a connected Distributed Sensor 
Network. 

Claim 15 (Original) The method of claim 1, further comprising the step of: 
assigning a path-key to a selected pair of sensor nodes connected by at least two 
communication links. 
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Claim 16 (Currently amended) A Distributed Sensor Network system, 
comprising: 

at least two sensor nodes, each said sensor node being pre-loaded prior to 
deployment thereof with a respective key ring including a plurality of individually 
selectable private keys randomly chosen from a common pool, the key rings of at least a 
pair of said sensor nodes having a pre-defined probability of having at least one common 
private key in common, each of said private keys of said key ring having an associated 
key identifier stored in a corresponding sensor node ; and 

each means associated with at least one of said sensor nodes having means for 
searching for another sensor node where a plurality of said key identifiers are broadcast 
to search for other sensor nodes with a matching of at least one of the key identifiers, said 
matching key identifier indicating the other sensor node has a private key ring including a 
in common key therewith to establish a secure communication link therebetween. 

Claim 17 (Currently amended) The Distributed Sensor Network system of claim 
16, further comprising: means for generating a key space having a multiplicity of keys , 
means for randomly selecting a pool of keys from said key space, means for assigning a 
specific key identifier for each key of said pool of keys, and means for randomly 
selecting at least two a distinct sets set of private keys from said pool of keys , thus 
forming for each said sensor node to thereby form said respective key rings for said 
sensor nodes. 
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Claim 18 (Cancelled). 

Claim 19 (Currently amended) The Distributed Sensor Network system of claim 
17, further comprising: at least one controller node associated with said for secure 
communication with at least one of sensor nodes, said at least one controller node having 
said key identifiers of said key ring of said at least one sensor node and a specific sensor 
identifier of said at least one sensor node saved therein, and means for broadcasting said 
key identifiers of said respective key ring a sensor-controller key stored therein and 
respectively stored in a corresponding sensor node . 

Claim 20 (Original) The Distributed Sensor Network system of claim 19, further 
comprising means for generating a revocation message and broadcasting the same for 
revocation of a compromised at least one of said two sensor nodes, said revocation 
message containing a signed list of said key identifiers of said key ring of said 
compromised sensor node. 

Claim 21 (Original) The Distributed Sensor Network system of claim 20, further 
comprising means for reconfiguring communication links of said at least another sensor 
node affected by revocation of said compromised sensor node. 
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Claim 22 (Previously presented) The Distributed Sensor Network system of claim 
16, further comprising means for assigning a path-key to a selected pair of sensor nodes 
connected by at least two communication links. 
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